09d7cda37dd414a75345f7395a0e0c31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09d7cda37dd414a75345f7395a0e0c31_JaffaCakes118
Size

396KB
MD5

09d7cda37dd414a75345f7395a0e0c31
SHA1

3b66bc0dd3b02fd29659722e938ec24331516912
SHA256

201728574fbb9311e38a571d4e6bc3e2eef75cc6ed63598220b1e263331fa373
SHA512

189325d07a05533d075ad45630d21839656ea116d8ef393ef316c88de85d0b53b482fd43535d21d264076e2689d678a6764119e62e74cefc69a72ac7bdda3412
SSDEEP

6144:Eue0nPJjREoV9/+I05IvGmNmIRmimH9U5huSQJyFdrekQHkJImdTsWaBzxLcyt7z:DeWXZQI4OVRmDC5hur0FdEHb8TsrJRz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09d7cda37dd414a75345f7395a0e0c31_JaffaCakes118

Files

09d7cda37dd414a75345f7395a0e0c31_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a3b66d9a19daeb7017d57a5a165b8bf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
RaiseException
GetStdHandle
GetModuleFileNameA
QueryPerformanceFrequency
RegisterWowExec
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
InterlockedIncrement
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree

user32

SendMessageW
DestroyWindow
SetDlgItemTextW
EndDialog
GetDlgItem
GetSysColor
GetWindowRect
GetClientRect
ScreenToClient
GetSubMenu
EnableMenuItem
ClientToScreen
TrackPopupMenuEx
DestroyMenu
EnableWindow
GetWindowPlacement
ReleaseCapture
IsWindowVisible
PtInRect

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 450KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ